info for Wireguard and routing AllowedIPs

[Michele Salerno]

Hi,

I set up wireguard for vpn and the configuration in the clients is this:

# wg show

interface: wg0
  public key: XYZ
  private key: (hidden)
  listening port: 51820

peer: ZYX
  endpoint: 195.32.xxx.xxx:51820
  allowed ips: 10.27.252.1/32
  latest handshake: 15 days, 6 hours, 7 minutes, 55 seconds ago
  transfer: 177.39 KiB received, 22.66 MiB sent
  persistent keepalive: every 1 minute

I want the routers to be able to communicate with each other, I want the
/24 network not the 32.
How can I set up openwisp to achieve this?

Best regards,

Michele

[Federico Capoano]

On the server I am not sure if it's possible:
https://github.com/openwisp/openwisp-controller/blob/4836913acec5fb7b75d644e2fd64bd72cbd7d055/openwisp_controller/config/base/vpn.py#L735-L748

But on the client you could try to set the address to be `{{ server_ip_address_9fdfcebbd8264439a9eb49f050547d4e }}/16'.

Best regards

Federico Capoano

--
You received this message because you are subscribed to the Google Groups "OpenWISP" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openwisp+u...@googlegroups.com.
To view this discussion, visit https://groups.google.com/d/msgid/openwisp/3c033c58-f3ce-4011-bb59-509104e898fc%40gmail.com.

[Michele Salerno]

Hi Federico,

thank you for your reply. Only today I can try and in the preview I get this result:

config wireguard_wg0 'wgpeer_wg0'
	list allowed_ips '10.27.252.1/32/16'
	option endpoint_host 'vpn.nnxx.ninux.org'
	option endpoint_port '51820'
	option persistent_keepalive '60'
	option public_key 'KYjqwh5FYxd/45JC08ljnpiJtvnlyRIFLU3fUev14T0='
	option route_allowed_ips '1'

In the template I modified it like this:

{{server_ip_network_f84b678191bd4ad4bd8d743aa1e41ecf}}/16

How can it be solved?
Thank you

Michele

Il 24/05/25 16:07, Federico Capoano ha scritto:

To view this discussion, visit https://groups.google.com/d/msgid/openwisp/CAAGgX6%2By%2B%3Dwt4ajB6oRy8yeqLiWFGeYvFZxTihb0tSgnMNj24Q%40mail.gmail.com.

-- 
Informativa Privacy - Ai sensi del D. Lgs n. 196/2003 (Codice Privacy) si precisa che le informazioni contenute in questo messaggio sono riservate e ad uso esclusivo del destinatario. Qualora il messaggio in parola Le fosse pervenuto per errore, La preghiamo di eliminarlo senza copiarlo e di non inoltrarlo a terzi, dandocene gentilmente comunicazione. Grazie.

Privacy Information - This message, for the D. Lgs n. 196/2003 (Privacy Code), may contain confidential and/or privileged information. If you are not the addressee or authorized to receive this for the addressee, you must not use, copy, disclose or take any action based on this message or any information herein. If you have received this message in error, please advise the sender immediately by reply e-mail and delete this message. Thank you for your cooperation.

[Federico Capoano]

Your input is incorrect.

My suggestion was:

{{ server_ip_address_9fdfcebbd8264439a9eb49f050547d4e }}/16

Your input was:

{{server_ip_network_f84b678191bd4ad4bd8d743aa1e41ecf}}/16

Note the difference in bold.

F.

To view this discussion, visit https://groups.google.com/d/msgid/openwisp/60ce18ac-42fd-4680-bc0a-0a2dd4f7879d%40gmail.com.